MedSpring notified over 13,000 affected individuals following a phishing scam that compromised protected health information. The organization has also offered one year of identity protection and fraud resolution services.